Unscored CVE-2018-16206 EUVD-2018-8058GHSA-2pfr-hv6x-5c36

Cross-site scripting vulnerability in WordPress plugin spam-byebye 2.2.1 and earlier allows remote attackers to inject arbitrary web script…

Published Jan 13, 2019 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Yohsuke Ohkouchi Product: spam-byebye Category: Web / CMS

Description

Cross-site scripting vulnerability in WordPress plugin spam-byebye 2.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Yohsuke Ohkouchi	spam-byebye	2.2.1 and earlier	—

References

JVN#58010349 third-party-advisory
https://wordpress.org/plugins/spam-byebye/